Get Full Government Meeting Transcripts, Videos, & Alerts Forever!
Get email alerts on the Data Privacy topic
No spam. Unsubscribe anytime.
County to offer credit‑monitoring option after data incident; insurer‑appointed counsel to handle notifications
Summary
After reviewing a recent data incident, county officials said the matter was classified as an informational incident (not a security breach) but agreed to provide a no‑cost credit‑monitoring opt‑in for potentially affected individuals through counsel appointed by the county’s cyber‑risk insurer.
County staff briefed commissioners on a recent data incident and a plan to offer affected individuals an opt‑in credit‑monitoring service at no cost to the county.
Officials said they reviewed the incident with outside counsel and the county’s cyber‑risk insurer and concluded the event did not meet the statutory definition of a security breach but was an informational incident. Out of an abundance of caution and to protect employee privacy, the insurer’s appointed counsel offered to manage notifications and provide an opt‑in credit‑monitoring service at no cost to the county.
What the county will do: Staff said the insurer’s law firm would prepare and send notification letters (where appropriate) to potentially affected individuals and handle enrollment for credit monitoring. The county will compile an Excel list of potential names for counsel to use; the notification process would be routed through the third party rather than county staff. County counsel and the sheriff opened an inquiry and confirmed applicable state and federal reporting obligations were followed.
Board action: A commissioner moved and the board approved engaging the insurer‑appointed counsel to send notifications and offer the opt‑in monitoring service. Staff said the third‑party outreach would limit county staff involvement and would be provided at insurer expense.
